Senior Engineer, Cybersecurity (R6438)

About the role

Responsibilities

• Develop the platform’s cybersecurity architecture, requirements, and protection strategy.
• Perform threat modeling, vulnerability assessments, attack-surface analysis, and cyber risk assessments.
• Define protections for secure boot, authentication, access control, encryption, key management, software updates, and data communications.
• Apply defense-in-depth across aircraft systems, networks, radios, data links, and external interfaces.
• Lead DoD Risk Management Framework activities and develop required authorization evidence.
• Evaluate hardware, software, firmware, and supplier designs for cybersecurity risks.
• Develop cybersecurity verification plans and support vulnerability scanning, penetration testing, and cyber-resiliency testing.
• Coordinate risk mitigation and corrective actions with engineering teams, suppliers, customers, and program leadership.
• Ensure cybersecurity solutions support aircraft safety, availability, and mission effectiveness.
• Bachelor’s degree in cybersecurity, computer engineering, electrical engineering, software engineering, systems engineering, or a related field.
• Typically requires a minimum of 5 years of related experience with a Bachelor’s degree.
• Experience with aircraft, aerospace, defense, or other mission-critical embedded systems.
• Knowledge of avionics, mission systems, platform networks, communications, or data links.
• Experience with threat modeling, secure system architecture, vulnerability analysis, and security testing.
• Familiarity with DoD RMF, NIST security guidance, cryptography, and key management.
• Strong technical leadership, writing, and customer communication skills.
• Ability to obtain and maintain the required security clearance.
• Cybersecurity experience on military aircraft, unmanned aircraft, or airborne mission systems.
• Familiarity with NIST SP 800-53, NIST SP 800-160, DO-326A, DO-355, and DO-356A.
• Experience with anti-tamper, program protection, supply-chain risk management, or cross-domain solutions.
• Experience supporting cyber testing, penetration testing, or adversarial assessments.
• Relevant certification such as CISSP, Security+, CEH, or GIAC.
• Active U.S. security clearance.